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IN TTTTC rr.AIMS : 

A lisiitig of die status of all claims 1-21 in the present patent application is pn)vided 

below: 

1 . (Previously Presented) A method for use in compliuncc munagement, 

comprising: 

presenting, via a computer network, at least one user with n series of questions 
relating to at least one business category; 

soliciting, via the computer network, a response from the at least one user for each 
question presented; 

determining a detection index based on the nutnber of responses to each of the 
scries of questifins; 

determining an occurrence index based on the potential consequence of non- 
compliance; 

determining a standard severity risk index based on the expected severity of non- 
compliance; and 

prioritizing, via the computer network, the at least one business category based on 
the at least one user's responses and at least one total risk score comprising the product of the 
detection, occurrence and standard severity risk indices. 

2. (Original) The method of claim 1 wherein the user response comprises a Yes" or 

"No- 

3. (Original) The method of claim 1 wherein at the least one standard severity risk 
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index comprises a number between 1 aiid 10 corresponding tx) a speciJUc level of risk. 

4. (Original) Tlic method of claim 3 wherein the number "1" comprises the lowest 
level of risk severity, and tlic number "10" the highest level of Keverity. 

5. (Original) The method of elaiin 1 wherein the at least one standard severity risk 
iiidCA corresponds to ttie at least one business category. 

6. (Original) The method of claim 1 further comprising the step of determining a 
detection index based on the number of questions presented, the at least one user*s responses, 
and the number of users. 

7. (Canceled) 

8. (Canceled) 

9. (Previously Presenled) The method of chiim 1 fiirthcr comprising ranking the ut 
least one business category bused on the ut least one total risk score. 

10. (Previously Presented) A system for use in compliance management, 
comprising: 

a query module associated with an engine for presenting at least one user with a series of 
questions relating to at least one hu.siness category, and for soliciting and rceciving responses 
from the at least one user for each question presented; 

a prioritization module associated with the engine for: ( 1 ) determining a detection index 
based on the number of responses to e^jch of the series of questions, determining an occurrence 
index based on the potential consequence of non-compliance » and determining a standard 
severity risk index based on the expected severity of non-compliance, and (2) prioritizing the at 
least one business categoi7 based on the at least one user's responses and at least one total risk 
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score comprising the product of a detection, occurrence and standard severity risk indices. 

1 1. (Original) I'he system of claim 10 wherein the series of questions are presented to 
the user over a communications neiworlc, 

12. (Original) The system of claim 10 further comprising an adminislraliun module 
associated with the engine for inputting, updating and <icccssing data associated with the query 
and prioritization modules, the admiiiisiratiun module heing accessible to an adminif^trator of liie 
system via an aUminislralion interface, 

13. (Originai) The system of claim 1 0 wherein the user response comprises a "Yes" 
or ''No*' response. 

14. (Original) The system of claim 10 wherein the at least one standard severity risk 
index comprises a number between 1 and 10 comexponding to a specific level ufrisk* 

15. (Original) Tlie system ol" claim 14 wherein the number "1" comprises the lowc^Jl 
level of severity, and the number **10" the highe-si level of severity. 

16. (Original) The system of claim 10 wherein the at least one standard severity risk 
index corresponds to the at least one business category, 

1 7. (Previously Presented) The system of claim 1 0 wherein the detection index is 
based on the number of questions presented, the at least one user's responses, and tlic number of 
users. 

18. (Canceled) 

19. (Canceled) 
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20* (Previously Presented) The system of claim 10 wherein prioritization module 
further ranks the 3t least one business category based on the at least one total risk score. 

21. (Previously Presented) The method of claim 1 wherein ihc detection is 
determined by the following formula: 

II 

^ of unswers J 
Detection index = ■ , 

wherein / refers to each possible response, 

# of answers,- refers to the number of queries or questions that were answered with a 
particular response I, 

n rctcrs to the total number of queries or questions in that category, and 
d refers to the number of depaitments or units rcspundiing. 

22. (New) The metliod of claim 1, wherein the occurrence index weighs the total risk 
score basecl on the potential consequences of non-compliance. 

23. (New) The method of claim 1 » wherein the occurrence index is based on the total 
number of agents or employees arfccied by non-compliance. 

24. (New) The method of claim I , wherein the occurrence index is based on the total 
number of policies in force. 
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